You trust him right? Just give him a normal account,
and change the password when he's finished.
What's he gonna do, elevate his priveliges, get root,
install a rootkit and brag about it on irc?

If he does something harmful, you format and reinstall.
It's a rare individual that can escape the restrictions
of a normal account, much less a chroot jail.